CVE-2026-46313

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-46313
In the Linux kernel, the following vulnerability has been resolved: media: intel/ipu6: fix error pointer dereference In a error path isp->psys is confirmed to be an error pointer not NULL so this condition is true and the error pointer is dereferenced. So isp-psys should be set to NULL before going to out_ipu6_bus_del_devices. Detected by Smatch: drivers/media/pci/intel/ipu6/ipu6.c:690 ipu6_pci_probe() error: 'isp->psys' dereferencing possible ERR_PTR() [Sakari Ailus: Fix commit message.]

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/8dd088b8b106f7b119664f965b691785998edcfb Patch
https://git.kernel.org/stable/c/c352f90e093ae49902e47f41579e1aa41899ff64 Patch
https://git.kernel.org/stable/c/f43e30646fc93799f3f48530d0ccbd52902c0541 Patch
https://git.kernel.org/stable/c/fad134c446189e9bb48cea1a5ca426d2889a9c71 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

23 Jul 2026, 07:10

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: media: intel/ipu6: corregir desreferencia de puntero de error En una ruta de error, se confirma que isp->psys es un puntero de error no NULL, por lo que esta condición es verdadera y el puntero de error es desreferenciado. Por lo tanto, isp-psys debería establecerse en NULL antes de ir a out_ipu6_bus_del_devices. Detectado por Smatch: drivers/media/pci/intel/ipu6/ipu6.c:690 ipu6_pci_probe() error: 'isp->psys' desreferenciando posible ERR_PTR() [Sakari Ailus: Corregir mensaje de commit.]

08 Jul 2026, 14:51

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-476
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/8dd088b8b106f7b119664f965b691785998edcfb - () https://git.kernel.org/stable/c/8dd088b8b106f7b119664f965b691785998edcfb - Patch
References () https://git.kernel.org/stable/c/c352f90e093ae49902e47f41579e1aa41899ff64 - () https://git.kernel.org/stable/c/c352f90e093ae49902e47f41579e1aa41899ff64 - Patch
References () https://git.kernel.org/stable/c/f43e30646fc93799f3f48530d0ccbd52902c0541 - () https://git.kernel.org/stable/c/f43e30646fc93799f3f48530d0ccbd52902c0541 - Patch
References () https://git.kernel.org/stable/c/fad134c446189e9bb48cea1a5ca426d2889a9c71 - () https://git.kernel.org/stable/c/fad134c446189e9bb48cea1a5ca426d2889a9c71 - Patch
First Time Linux linux Kernel
Linux

08 Jun 2026, 17:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-06-08 17:16

Updated : 2026-07-23 07:10

NVD link : CVE-2026-46313

Mitre link : CVE-2026-46313

CVE.ORG link : CVE-2026-46313

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference